Site Hack via CKForms (Critical Security Issue)

[emeka]

Our site was hacked on Monday night via a vulnerability in CkForms. Fortunately, it was not a malicious hack but it did take our site down for two days and created quite a bit of havoc in the office. We have the log of the violation including server instructions. It started with a Google search of URL's with 'CkForms', and was effected using loopholes in CK Forms to change the administrator password.

For security reasons we do not wish to post the rest of the details here. We need to be in direct contact with someone from Cookex to report this violation (log available). We are very pleased with CkForms but will be forced to report this to the Joomla vulnerabilities list so as to save others from this nightmare. Let us work this out together and post a fix as soon as possible..... Thanks. ()